Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
File: JfAH5PvVpiKqhTxCWgEO54n3EVs.mft (raw, json)
Hash identifier: uZTRb4FvmoMipBFzMFwwcp71SGtgZzovQVLn8HW2YAQ=
Subject key identifier: 39:52:2A:AB:B1:A7:81:58:9D:7A:62:E9:8B:0B:99:BA:27:90:9B:2B
Authority key identifier: 25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
Certificate issuer: /CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Certificate serial: 0194BD8560534027B6FA035A723A5AF36D5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
Manifest number: 0839
Signing time: Fri 31 Jan 2025 18:00:22 +0000
Manifest this update: Fri 31 Jan 2025 18:00:22 +0000
Manifest next update: Sat 01 Feb 2025 18:00:22 +0000
Files and hashes: 1: 6s8ePjyJ0ZZIRz1UUs_Xg91s5ts.roa (hash: qemS/elZANo0HMcYP0VSYi/2UWeoq+R5j6kNuTymeGQ=)
2: JfAH5PvVpiKqhTxCWgEO54n3EVs.crl (hash: MpUw3m5nFHSw01zi+W/xDrdmWQrfXdvUP9elbAa/x1o=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:85:60:53:40:27:b6:fa:03:5a:72:3a:5a:f3:6d:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25f007e4fbd5a622aa853c425a010ee789f7115b
Validity
Not Before: Jan 31 18:00:22 2025 GMT
Not After : Feb 1 18:00:22 2025 GMT
Subject: CN=39522aabb1a781589d7a62e98b0b99ba27909b2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a8:c6:17:47:5c:11:33:62:d1:47:44:6b:19:
9e:29:72:65:a9:b2:ab:a1:77:21:5a:fe:53:6f:e1:
f6:8b:1e:66:a6:6b:79:fe:40:bc:08:f0:67:96:4e:
7d:ad:7f:d5:56:18:3f:b0:11:91:2e:d0:47:51:4e:
b3:61:a4:06:91:3b:62:0f:67:86:36:76:b7:43:19:
33:95:cc:bb:c8:90:af:ed:e8:c7:10:28:bc:0e:37:
3b:ad:42:95:9f:e5:bd:83:c3:8f:7b:f6:68:c9:dd:
7c:f3:c9:65:78:e4:28:a0:45:fc:7e:45:5f:62:48:
24:07:3e:b0:9d:86:01:2d:63:47:38:27:95:1b:fa:
26:34:0f:e4:c6:f2:81:5b:48:02:d8:1f:8e:d5:59:
24:5f:86:b6:49:31:12:6b:96:67:49:b2:ea:b0:5c:
71:d6:d8:e5:bb:39:a2:05:37:b5:50:c1:48:25:41:
dc:b9:e5:78:66:74:01:1e:2c:26:a4:14:a1:05:39:
6a:2b:b9:58:a2:7e:b0:8e:ee:11:d6:cf:28:86:55:
90:ee:32:f6:88:e4:f7:f4:cf:78:61:0d:f0:6e:a6:
e3:dd:92:45:76:1c:6e:27:4e:7e:98:f1:af:7e:b7:
20:08:a9:63:bd:f0:1d:b6:68:9c:ca:c3:46:b3:05:
ee:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:52:2A:AB:B1:A7:81:58:9D:7A:62:E9:8B:0B:99:BA:27:90:9B:2B
X509v3 Authority Key Identifier:
keyid:25:F0:07:E4:FB:D5:A6:22:AA:85:3C:42:5A:01:0E:E7:89:F7:11:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JfAH5PvVpiKqhTxCWgEO54n3EVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/ebef4c-fd91-47ba-99e1-ec68e35a71ef/1/JfAH5PvVpiKqhTxCWgEO54n3EVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:4d:f6:5f:30:6a:be:95:2f:f8:59:2a:d5:38:fa:0e:4c:bb:
76:18:66:b7:0d:cd:b0:79:66:3a:09:d0:21:76:cc:fd:b1:b5:
30:39:88:3e:40:2a:05:a5:f4:8b:c0:7b:55:20:78:b6:e3:cc:
59:e4:4e:0a:09:77:52:99:84:d6:1b:7d:b0:8a:23:f4:cd:5c:
35:e7:76:22:9b:44:c2:1d:c8:07:20:10:fb:7e:9a:f6:48:68:
ce:ea:72:42:59:08:34:e5:d0:b7:d3:ca:c4:3a:40:81:e4:03:
17:2c:60:65:4b:37:42:64:8c:bc:78:2e:0e:cc:00:f5:8e:71:
ce:a3:53:aa:a9:4d:04:3f:bd:cb:55:c1:7d:21:8d:b3:7a:a3:
f7:9a:3d:be:f4:75:bd:25:cd:ef:73:b0:f6:62:b9:2e:e6:37:
1a:bf:a7:f5:dd:d4:1a:3f:8e:01:50:6b:05:2e:0e:f1:66:f7:
92:75:69:a9:42:2e:86:a3:f9:a5:e4:e1:d8:77:61:42:86:61:
42:bb:0a:5f:de:18:fc:00:85:b8:b5:3c:8c:73:dd:f3:de:89:
f8:ea:2a:ba:f5:ac:23:3f:da:e3:18:5d:3d:1f:bf:0b:cd:37:
df:48:e6:4f:a4:a2:25:db:b9:93:00:fb:07:6d:2a:08:38:c2:
c8:4a:d4:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 19:02:43 2025 by rpki-client